What is more secure?

["Tomas" <s.tomas () gmail com>]

Hello all,

I'd like to ask you, as guys who know a lot of about security, this
question: what is more secure when dealing with web servers and public ips.
Is it more secure to give all of your public ips directly to a web server
and filter traffic with firewall, or is it better to give all public ips to
a firewall and only redirect http and https ports to internal web server?

(Sorry for my English, I know it's not perfect).